This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/PxYDGFFeIMnR3R8ylA8SbuIB6xI.roa File: PxYDGFFeIMnR3R8ylA8SbuIB6xI.roa (raw, json) Hash identifier: B8FamIOBKJ45rwoZ7RLg7M2fC1zz0YHW8ls9Ia37tyM= Subject key identifier: 3F:16:03:18:51:5E:20:C9:D1:DD:1F:32:94:0F:12:6E:E2:01:EB:12 Certificate issuer: /CN=baaa7b4c01e929c38923981ab51c9727a1f9f07e Certificate serial: 019B7D5D29A2B5D4CB28C757A515AAE5E772 Authority key identifier: BA:AA:7B:4C:01:E9:29:C3:89:23:98:1A:B5:1C:97:27:A1:F9:F0:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/PxYDGFFeIMnR3R8ylA8SbuIB6xI.roa Signing time: Fri 02 Jan 2026 06:20:16 +0000 ROA not before: Fri 02 Jan 2026 06:20:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 268624 IP address blocks: 45.141.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.mft rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:29:a2:b5:d4:cb:28:c7:57:a5:15:aa:e5:e7:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=baaa7b4c01e929c38923981ab51c9727a1f9f07e Validity Not Before: Jan 2 06:20:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3f160318515e20c9d1dd1f32940f126ee201eb12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a4:9e:53:da:ff:d8:29:11:ba:af:6b:e0:05: f4:2a:75:6a:d8:0e:e9:dc:84:53:1d:66:50:c4:6d: 71:82:63:a2:91:da:15:2a:63:e9:ab:d9:1b:7e:e0: 1a:c2:bd:82:7a:6c:a0:a4:6d:0a:e0:67:c4:d9:76: 38:dd:85:01:3a:32:a2:f3:98:59:e2:e5:af:08:87: 9e:dd:cf:93:11:8e:22:c2:37:7e:2d:8b:a0:0c:68: 97:3f:fa:2e:d0:14:12:eb:77:3f:8e:cc:e3:32:1e: 32:db:11:33:fb:d3:9b:d6:ff:91:b5:d2:00:5b:d4: 8e:b4:ce:c7:42:bb:09:30:5d:0a:60:d0:69:23:88: 30:28:ad:3c:15:63:97:89:8b:96:c9:9c:8b:fe:b5: 74:be:e0:94:93:86:e0:19:2a:2b:91:1e:ce:8b:32: ad:ed:af:29:4e:fe:1f:0d:a1:1f:fa:04:7f:f1:2a: 61:0d:c7:64:ea:73:d8:04:58:8b:7e:da:b4:c2:92: e4:0c:d1:35:51:68:c4:d2:33:1a:2c:48:61:9e:dc: 03:bd:17:df:4b:2f:79:7d:b7:9c:9f:0d:e1:ca:33: fe:b3:2a:7c:87:7d:7f:c2:37:6f:60:fa:6f:94:43: 8e:0d:7e:3f:3d:ca:4b:8c:c2:2d:6b:58:59:ff:2b: c6:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:16:03:18:51:5E:20:C9:D1:DD:1F:32:94:0F:12:6E:E2:01:EB:12 X509v3 Authority Key Identifier: keyid:BA:AA:7B:4C:01:E9:29:C3:89:23:98:1A:B5:1C:97:27:A1:F9:F0:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/PxYDGFFeIMnR3R8ylA8SbuIB6xI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.141.214.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:3e:00:20:a2:80:d1:ee:77:5e:ff:3e:fa:c0:05:8d:9d:9d: 3f:9a:83:ef:1e:fb:2f:6f:f4:f7:72:d8:1a:25:12:8a:e1:b2: 1a:86:06:75:24:20:04:f6:b2:65:39:88:38:bb:09:21:32:0e: ba:1c:07:dd:47:f6:46:a9:6a:17:9a:33:50:61:cd:9b:84:46: 7c:03:4a:07:33:0e:33:61:31:cf:8e:74:fa:d3:cb:da:c0:9b: c5:d9:61:e4:ad:6c:2e:c4:97:a2:4e:d3:58:cf:23:fe:26:e3: bf:58:41:ff:e3:cb:bd:33:8e:72:33:c4:4a:e9:86:cd:22:72: b6:04:00:ab:15:66:cf:9d:d1:8b:b4:22:d7:a9:74:b0:42:4c: 69:80:14:2e:17:c0:7e:8b:46:f5:f0:10:57:60:00:76:e2:c5: 90:d0:70:50:46:66:be:86:9e:b2:59:50:0a:96:e9:97:bf:78: e4:27:4f:7f:13:6b:29:d2:64:76:39:ed:a3:2c:91:0d:0b:9e: 33:1c:38:06:7a:d5:84:14:59:a2:de:39:d6:db:36:94:65:b2: c2:da:b7:30:cd:0f:04:c5:f5:da:71:11:c9:d5:16:5e:8d:15: f6:d0:77:e5:9e:97:72:d9:51:05:4e:71:ce:3d:5a:a8:7b:07: de:ea:77:e3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XSmitdTLKMdXpRWq5edyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhYWE3YjRjMDFlOTI5YzM4OTIzOTgxYWI1MWM5NzI3YTFm OWYwN2UwHhcNMjYwMTAyMDYyMDE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZjE2MDMxODUxNWUyMGM5ZDFkZDFmMzI5NDBmMTI2ZWUyMDFlYjEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy6SeU9r/2CkRuq9r4AX0KnVq2A7p 3IRTHWZQxG1xgmOikdoVKmPpq9kbfuAawr2CemygpG0K4GfE2XY43YUBOjKi85hZ 4uWvCIee3c+TEY4iwjd+LYugDGiXP/ou0BQS63c/jszjMh4y2xEz+9Ob1v+RtdIA W9SOtM7HQrsJMF0KYNBpI4gwKK08FWOXiYuWyZyL/rV0vuCUk4bgGSorkR7OizKt 7a8pTv4fDaEf+gR/8SphDcdk6nPYBFiLftq0wpLkDNE1UWjE0jMaLEhhntwDvRff Sy95fbecnw3hyjP+syp8h31/wjdvYPpvlEOODX4/PcpLjMIta1hZ/yvGUwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD8WAxhRXiDJ0d0fMpQPEm7iAesSMB8GA1UdIwQY MBaAFLqqe0wB6SnDiSOYGrUclyeh+fB+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXFwN1RBSHBLY09KSTVnYXRSeVhKNkg1OEg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYjllNzAtNDg5YS00MDg4LWIyOGUt ZTY4ZjZjZjJjMGQyLzEvUHhZREdGRmVJTW5SM1I4eWxBOFNidUlCNnhJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9hYjllNzAtNDg5YS00MDg4LWIyOGUtZTY4ZjZjZjJjMGQy LzEvdXFwN1RBSHBLY09KSTVnYXRSeVhKNkg1OEg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALY3WMA0G CSqGSIb3DQEBCwUAA4IBAQCcPgAgooDR7nde/z76wAWNnZ0/moPvHvsvb/T3ctga JRKK4bIahgZ1JCAE9rJlOYg4uwkhMg66HAfdR/ZGqWoXmjNQYc2bhEZ8A0oHMw4z YTHPjnT608vawJvF2WHkrWwuxJeiTtNYzyP+JuO/WEH/48u9M45yM8RK6YbNInK2 BACrFWbPndGLtCLXqXSwQkxpgBQuF8B+i0b18BBXYAB24sWQ0HBQRma+hp6yWVAK lumXv3jkJ09/E2sp0mR2Oe2jLJENC54zHDgGetWEFFmi3jnW2zaUZbLC2rcwzQ8E xfXacRHJ1RZejRX20Hflnpdy2VEFTnHOPVqoewfe6nfj -----END CERTIFICATE-----Generated at Sun Jan 25 18:20:44 2026 by rpki-client